CWE-270 · 22 kayıt

Privilege Context Switching Error

Bu sınıftaki CVE’ler

22 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
76Bu hafta	CVE-2021-3493Silahlaştırılmış	The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities canonical · ubuntu linux · CWE-270 Yerel yetki yükseltme	Yüksek7,8	KEV	%49,2	17 Nis 2021
40Planlayın	CVE-2023-25754İstismar yok	Apache Airflow: Privilege escalation using airflow logsapache · airflow · CWE-270 Kimlik doğrulamasız	Kritik9,8	—	%2,3	8 May 2023
35İzleyin	CVE-2023-37912İstismar yok	XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macroxwiki · xwiki-rendering · CWE-270 RCE	Yüksek8,8	—	%1,2	25 Eki 2023
35İzleyin	CVE-2024-8641İstismar yok	Privilege Context Switching Error in GitLabgitlab · gitlab · CWE-270	Yüksek8,8	—	%0,5	12 Eyl 2024
35İzleyin	CVE-2024-36513İstismar yok	A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 alfortinet · forticlient · CWE-270 Yerel yetki yükseltme	Yüksek8,8	—	%0,2	12 Kas 2024
33İzleyin	CVE-2024-11263İstismar yok	arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=yzephyrproject · zephyr · CWE-270	Yüksek8,4	—	%0,2	15 Kas 2024
32İzleyin	CVE-2025-9408İstismar yok	Userspace privilege escalation vulnerability on Cortex Mzephyrproject-rtos · zephyr · CWE-270 Yerel yetki yükseltme	Yüksek8,1	—	%0,1	11 Kas 2025
31İzleyin	CVE-2017-2663İstismar yok	It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and credhat · subscription-manager · CWE-270 Yerel yetki yükseltme	Yüksek7,8	—	%0,4	27 Tem 2018
31İzleyin	CVE-2025-60721İstismar yok	Windows Administrator Protection Elevation of Privilege Vulnerabilitymicrosoft · windows 11 24h2 · CWE-270 Yerel yetki yükseltme	Yüksek7,8	—	%0,4	11 Kas 2025
31İzleyin	CVE-2024-46975İstismar yok	GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mappingimagination technologies · graphics ddk · CWE-270	Yüksek7,9	—	%0,2	22 Şub 2025
30İzleyin	CVE-2026-34853İstismar yok	Permission bypass vulnerability in the LBS module.huawei · harmonyos · CWE-270 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,2	13 Nis 2026
26İzleyin	CVE-2020-7019İstismar yok	In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security.elastic · elasticsearch · CWE-270	Orta6,5	—	%1,2	18 Ağu 2020
26İzleyin	CVE-2024-12570İstismar yok	Privilege Context Switching Error in GitLabgitlab · gitlab · CWE-270	Orta6,7	—	%0,4	12 Ara 2024
24İzleyin	CVE-2025-26499İstismar yok	Under heavy system utilization a random race condition can occur during authentication or token refresh operation.wind river studio developer · wind river studio developer · CWE-270 Yarış durumu	Orta6,0	—	%0,1	11 Eyl 2025
22İzleyin	CVE-2024-37294İstismar yok	Aimeos denial of service vulnerability in SaaS and marketplace setupsaimeos · aimeos-core · CWE-270	Orta5,5	—	%0,4	11 Haz 2024
22İzleyin	CVE-2024-47173İstismar yok	Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setupsaimeos · ai-admin-graphql · CWE-270	Orta5,5	—	%0,4	24 Eki 2024
22İzleyin	CVE-2025-46406İstismar yok	A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Dgallagher · command centre server · CWE-270 Yerel yetki yükseltme	Orta5,6	—	%0,1	9 Tem 2025
21İzleyin	CVE-2020-1719İstismar yok	A flaw was found in wildfly.redhat · wildfly · CWE-270	Orta5,4	—	%0,6	7 Haz 2021
21İzleyin	CVE-2024-51987İstismar yok	HTTP Client uses incorrect token after refresh in Duende.AccessTokenManagement.OpenIdConnectduendesoftware · duende.accesstokenmanagement · CWE-270 Kimlik doğrulamasız	Orta5,4	—	%0,2	7 Kas 2024
20İzleyin	CVE-2025-49583İstismar yok	XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin rightxwiki · xwiki · CWE-270	Orta5,1	—	%0,3	13 Haz 2025
12İzleyin	CVE-2020-7020İstismar yok	Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used.elastic · elasticsearch · CWE-270	Düşük3,1	—	%1,0	22 Eki 2020
8İzleyin	CVE-2025-55210İstismar yok	FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopessangoma · freepbx · CWE-270	Düşük2,0	—	%0,3	12 Şub 2026

CVE-2021-3493
76Bu hafta
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %49
- Yerel yetki yükseltme
canonical · ubuntu linux17 Nis 2021
CVE-2023-25754
40Planlayın
Apache Airflow: Privilege escalation using airflow logs
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
apache · airflow8 May 2023
CVE-2023-37912
35İzleyin
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
xwiki · xwiki-rendering25 Eki 2023
CVE-2024-8641
35İzleyin
Privilege Context Switching Error in GitLab
YüksekCVSS 8,8İstismar yokEPSS %0
gitlab · gitlab12 Eyl 2024
CVE-2024-36513
35İzleyin
A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 al
YüksekCVSS 8,8İstismar yokEPSS %0
- Yerel yetki yükseltme
fortinet · forticlient12 Kas 2024
CVE-2024-11263
33İzleyin
arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y
YüksekCVSS 8,4İstismar yokEPSS %0
zephyrproject · zephyr15 Kas 2024
CVE-2025-9408
32İzleyin
Userspace privilege escalation vulnerability on Cortex M
YüksekCVSS 8,1İstismar yokEPSS %0
- Yerel yetki yükseltme
zephyrproject-rtos · zephyr11 Kas 2025
CVE-2017-2663
31İzleyin
It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and c
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
redhat · subscription-manager27 Tem 2018
CVE-2025-60721
31İzleyin
Windows Administrator Protection Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
microsoft · windows 11 24h211 Kas 2025
CVE-2024-46975
31İzleyin
GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping
YüksekCVSS 7,9İstismar yokEPSS %0
imagination technologies · graphics ddk22 Şub 2025
CVE-2026-34853
30İzleyin
Permission bypass vulnerability in the LBS module.
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
huawei · harmonyos13 Nis 2026
CVE-2020-7019
26İzleyin
In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security.
OrtaCVSS 6,5İstismar yokEPSS %1
elastic · elasticsearch18 Ağu 2020
CVE-2024-12570
26İzleyin
Privilege Context Switching Error in GitLab
OrtaCVSS 6,7İstismar yokEPSS %0
gitlab · gitlab12 Ara 2024
CVE-2025-26499
24İzleyin
Under heavy system utilization a random race condition can occur during authentication or token refresh operation.
OrtaCVSS 6,0İstismar yokEPSS %0
- Yarış durumu
wind river studio developer · wind river studio developer11 Eyl 2025
CVE-2024-37294
22İzleyin
Aimeos denial of service vulnerability in SaaS and marketplace setups
OrtaCVSS 5,5İstismar yokEPSS %0
aimeos · aimeos-core11 Haz 2024
CVE-2024-47173
22İzleyin
Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups
OrtaCVSS 5,5İstismar yokEPSS %0
aimeos · ai-admin-graphql24 Eki 2024
CVE-2025-46406
22İzleyin
A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one D
OrtaCVSS 5,6İstismar yokEPSS %0
- Yerel yetki yükseltme
gallagher · command centre server9 Tem 2025
CVE-2020-1719
21İzleyin
A flaw was found in wildfly.
OrtaCVSS 5,4İstismar yokEPSS %1
redhat · wildfly7 Haz 2021
CVE-2024-51987
21İzleyin
HTTP Client uses incorrect token after refresh in Duende.AccessTokenManagement.OpenIdConnect
OrtaCVSS 5,4İstismar yokEPSS %0
- Kimlik doğrulamasız
duendesoftware · duende.accesstokenmanagement7 Kas 2024
CVE-2025-49583
20İzleyin
XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right
OrtaCVSS 5,1İstismar yokEPSS %0
xwiki · xwiki13 Haz 2025
CVE-2020-7020
12İzleyin
Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used.
DüşükCVSS 3,1İstismar yokEPSS %1
elastic · elasticsearch22 Eki 2020
CVE-2025-55210
8İzleyin
FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
DüşükCVSS 2,0İstismar yokEPSS %0
sangoma · freepbx12 Şub 2026

Tüm zafiyet sınıfları